Open-source atomic malware analysis

Analyze another

@aws-sdk/credential-provider-ini 3.862.0

UNKNOWN
Verdict: BENIGN
SHA256: ad63fc88183b10102196a19ff51c8cef7591d5e43baeea32223b29caf9b629b2
“AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config”
Mal-ecule
H₃(DbOsPo)Md(Pa₅)
Size 11.9 KB download
First seen 13 days ago
Analyzed 1 day ago
Package pkg:npm/@aws-sdk/[email protected]
Ecosystem javascript
Source registry.npmjs.org

Referenced by 3 samples

Objectives

component severity, 92% confident.
collection/file-targeting Credential-like path segment

Micro-behaviors

notable severity, 90% confident.
data/control-flow JavaScript iterates enumerable object keys
notable severity, 94% confident.
os/module Dynamic import followed by a provider reference
notable severity, 85% confident.
process/interpreter Package script invokes a language interpreter
baseline severity, 80% confident.
data/source/syntax Reads an array element into a variable

Metadata

notable severity, 85% confident.
package/dependencies Package has at least eight runtime deps
notable severity, 92% confident.
package/files Package.json declares a files allowlist
notable severity, 90% confident.
package/manifest Repository identifies major Git host
notable severity, 90% confident.
package/quality Package declares TypeScript tooling
baseline severity, 85% confident.
build JavaScript transpiler or minifier markers
baseline severity, 80% confident.
file/profile English function-word token "have"
baseline severity, 99% confident.
lang TypeScript declaration file
baseline severity, 95% confident.
library Contains bundled or minified JavaScript
baseline severity, 100% confident.
package package.json defines a package version
component severity, 70% confident.
file JavaScript file under 5KB
component severity, 100% confident.
file/extension File uses a source declaration extension
component severity, 85% confident.
package/testing/presence File is a test or type-declaration source file

Identity

SHA-256 ad63fc88183b10102196a19ff51c8cef7591d5e43baeea32223b29caf9b629b2
Canonical SHA-256 18b5efed4345640c6b969ea9dca3d457f15d756c7e5404529ad836a196e5dfd6
Filename [email protected]
Package @aws-sdk/credential-provider-ini
Version 3.862.0
PURL pkg:npm/@aws-sdk/[email protected]

Origin

Source x
Feed pkg.go.dev
Ecosystem javascript
Domain npmjs.org
URL https://registry.npmjs.org/@aws-sdk/credential-provider-ini/-/credential-provider-ini-3.862.0.tgz

Timeline

First seen 12 Aug 2026 00:02 UTC
First analyzed 12 Aug 2026 00:03 UTC
Last analyzed 24 Aug 2026 10:20 UTC
Last updated 24 Aug 2026 10:20 UTC

Labeling

Label unknown
Traits version 73866